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REMARKS 

Claims 1-7, 10-21, 23-31, 33 and 34 are currently pending in the application. Reconsideration 
and allowance of the pending claims are respectfully requested in light of the following remarks. 

Rejections Under 35 U.S.C. § 102 

Claims 1-7, 10, 12-13, 15-21, 23, 25-31, 33, and 34 stand rejected under 35 U.S.C. § 102(b) as 
being unpatentable over U.S. Patent Publication No. 2002/0091798 to Joshi et al. (hereinafter "Joshi"). 
Applicants respectfully traverse the rejection for the following reasons. 

The PTO provides in MPEP § 213 1 that "[t]o anticipate a claim, the reference must teach every 

element of the claim " With regard to independent claims 1,16, and 26, Applicants submit that Joshi 

fails to teach every element of those claims. 

In particular, Joshi fails to teach at least "wherein the transitory link is a symbolic link" as recited 
in claim 1 . The Examiner cited portions of paragraphs [0080], [0081], and [0147] as teaching this 
limitation. The cited passages of Joshi are reproduced in part for ease of reference. 

[0080] ...A resource can include a web page, software application, file, database... 

[0081 J... The resource name is the complete address to the resource... For HTTP, the 
resource name includes a host name, a file name... The file name is the path name to the 
file on the machine. 

[0147] When a user first requests a protected resource, the user is challenged 
according to the authentication scheme defined by the first level authentication rule in 
the applicable policy domain or the second level authentication rule in the applicable 
policy domain or the second level authentication rule in the applicable policy associated 
with the requested resource. If the user satisfies the authentication ride, an encrypted 
authentication cookie is passed to the user 's browser indicating a successful 
authentication. Once authenticated, the user may request a second resource protected 
by a different policy domain and/or policy with a different authentication rule, The user 
will be allowed access to the second resource... 

The Examiner appears to have taken the position that Joshi's "encrypted authentication cookie" 
and Joshi's description that a resource having a resource name that includes a file name, wherein the file 
name may include the path name to the file, reads on Applicants' "symbolic link." This is clearly 
erroneous. A cookie that allows access to a resource, the name of the resource including a path name to 
the file, does not teach a symbolic link . 
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The Applicant's specification, reproduced in part below, describes a symbolic link 
(emphasis added): 

[0051 J A symbolic link, also referred to as so ft link, is an indirect pointer to a file . It is 
a file that refers to another file by its pathname. In comparison, a hard link is essentially 
a label or name assigned to a file. In contrast to hard links, there are no restrictions on 
where a symbolic link can point, and it can refer to a file on another file system, to a 
directory, to itself or to a file which does not even exist (e.g. when the target of the 
symbolic link is removed). 

As such, a symbolic link is a soft link, and specifically not a hard link which is a name assigned to a file. 
The cited sections of Joshi, such as described above with reference to [0081], teach a name (which 
includes a path name) assigned to a resource (e.g. file). Thus, this does read upon a symbolic link. The 
symbolic link also clearly different than Joshi's "encrypted authentication cookie." The encrypted 
authentication cookie is described in Joshi in paragraphs [0147] and [0209]. 

[0147] When a user first requests a protected resource, the user is challenged according 
to the authentication scheme ... If the user satisfies the authentication rule, an encrypted 
authentication cookie is passed to the user's browser 

[0209] In one embodiment, the information stored by cookie 1450 (authentication cookie 
1450) includes the authentication level 1452 of the authentication scheme used to create 
the cookie, the user ID 1454 of the authenticated user, the IP address 1456 of the 
authenticated user, and session start time 1458 identifying the time at which the cookie 
1450 was created. 

Thus, a cookie as described by Joshi, stores information such as an authentication level and user ID and 
is passed to the user's browser. As further reference, of a description of the term "cookie," the 
Applicants* own specification provides: "A cookie includes data that a web server may store on a client 
system after a user has visited a web site. . . The cookie may be used to identify the user, instruct the 
server.,. submit account information for the user, and other administrative purposes." (Applicants' 
specification [0059]) Furthermore, as shown above in [0147] of Joshi, if an encrypted authentication 
cookie is passed to the user's browser the user may request a second resource (i.e. after a first resource) 
protected by a different policy domain if the authentication level of the first resource is equal to or 
greater than that of the second resource. The second resource would be a distinct resource (e.g. file) 
from the first resource (e.g. file). As such, the authentication cookie of Joshi is clearly different than and 
distinct from a symbolic link which is an indirect pointer to a file . 
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In view of the foregoing, it is apparent that the cited portions of Joshi are devoid of any teaching 
or suggestion of a -'symbolic link" as recited in independent claim 1 . As a result, Joshi fails to anticipate 
claim 1 for failure to teach every element thereof. Claims 16 and 26 also include a limitation similar to 
claim 1 requiring "transitory link is a symbolic link" and are therefore also not anticipated by Joshi for at 
least the same reasons as claim 1. Claims 2-10, 12, 13, 15, 17-23, 25, and 27-34 depend from and further 
limit claims 1,16, and 26 and are therefore also not anticipated by Joshi for at least that reason. 

Rejections Under 35 U.S.C. S 103 

Claims 1 1 , 1 4, and 24 stand rejected under 35 U.S.C. § 103 as being unpatentable over Joshi in 
view of Official Notice. In response, Applicants submit that, because claims 1 1, 14, and 24 depend from 
and further limit claims 1 and 16, the claims are allowable over the cited references for at least the same 
reasons set forth above with reference to claims 1 and 16. Accordingly, Applicants respectfully request 
that the rejection be withdrawn. 
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Conclusions 

For at least the reasons set forth in detail above, all of the pending claims are now deemed to be 
in condition for allowance. Accordingly, Applicants respectfully request that the Examiner withdraw the 
pending rejections and issue a formal notice of allowance. 
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